CVE-2025-26506

Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege

State: Published
Severity: 9.2 Critical
Published: Feb 14, 2025
Updated: Feb 14, 2025
Reserved: Feb 11, 2025

Read the record on cve.org

Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

Scores

CVSS	Score	Vector	Source
4.0	9.2 Critical	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	hp

Weaknesses

CWE-121

Affected Products

Product	Versions
Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed PrintersHP, Inc.	See HP security bulletin reference for affected versionsAffected

References

https://support.hp.com/us-en/document/ish_11953771-11953793-16/hpsbpi04007

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.